Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    06-03-2024 13:16

General

  • Target

    b77dd7dbff58ed8795121ee68da8e30b.pdf

  • Size

    128KB

  • MD5

    b77dd7dbff58ed8795121ee68da8e30b

  • SHA1

    cf5b1ac4b8a3fd3a41a24f296d64d3a13a0a6ee6

  • SHA256

    ace859b05836d6ee856552819223fd23b0384b2bfe3ce7aea344cd728c46e18f

  • SHA512

    c32719678905decd214ad55d17bf1a6f9048c37571cc537ee1598740ad0ba217accbdd77f002dbe8cdebbd4e039fa1c4172f25db51b923ae6bede60c5bb5bb8c

  • SSDEEP

    3072:dIN2Hh0ovYtPDPFG9RU3SV08R2t2AZ4JZT4wJYvpTWSfV5N1PoxG8:qN2HSovYtPDFG9i3SV08RQ2bZTPJYvF+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b77dd7dbff58ed8795121ee68da8e30b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4f9180d38d1fd89f82209344ef1bfa3f

    SHA1

    fd40333c9290a52f21b5132cedb4ae5988de70fc

    SHA256

    a9e1fc032aa494b90d3de65aad883dc3f5200262171f3fa8eadad60f9e5ea726

    SHA512

    68d171858634ef762548f3af5470340b9220dd4ffc6d710174328770f71837fa6b5faae9541b60892a10c485af360df07b207deaced578e13ad800c7308cfaad